CVE-2012-2763

Published: Jul 12, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.

Affected (1)

Products: Gimp: Gimp

Gimp

1 product

Gimp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gimp Gimp	Up to 2.6.13

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (18)

http://git.gnome.org/browse/gimp/commit/?h=gimp-2-6&id=744f7a4a2b5acb8b531a6f5dd8744ebb95348fc2

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2012-09/msg00043.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/50737

Source: cve@mitre.org

Broken Link

http://security.gentoo.org/glsa/glsa-201209-23.xml

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2012/05/31/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2012/07/01/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.gnome.org/show_bug.cgi?id=679215

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://git.gnome.org/browse/gimp/commit/?h=gimp-2-6&id=744f7a4a2b5acb8b531a6f5dd8744ebb95348fc2